Subprocessors and Service Providers

This list describes providers used or supported by Lasques, Inc. (las/ques) to operate the Services. Actual processing depends on deployment configuration, the features you enable, and the content those features require. A provider's role can differ by activity; this list does not imply that every provider receives every workspace's content.

1. Infrastructure and research services

| Provider | Service purpose | Relevant information | | ------------------------- | ----------------------------------------------------------------------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------------------------------------------------------- | | Amazon Web Services (AWS) | Web and compute infrastructure, AWS Batch CPU execution, persistent Git-node storage, operational infrastructure | Authorized code, run inputs and outputs, repository content, infrastructure and request records as needed for the service | | Cloudflare | Engine workflows, configured AI model hosting and embeddings, R2 object storage, optimizer and proof services, network and bot protection | Research prompts and relevant content, embeddings, files and outputs, code or proof submissions, and security or request information as applicable |

AI models are selected from the configuration and run through the configured provider infrastructure. A model's developer name is not, by itself, evidence that Lasques sends data directly to that developer.

2. Accounts, payments, and communications

| Provider | Service purpose | Relevant information | | -------- | ------------------------------------------------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------ | | Stripe | Checkout, subscription and seat billing, invoices, payment events, and disputes | Billing and transaction identifiers, account or organization billing details, and payment information submitted through Stripe | | Resend | Transactional email delivery | Recipient and sender addresses, email content, invitations, authentication links, and delivery information | | Google | Configured Google sign-in | Sign-in identifiers and account information exchanged through that flow |

3. Optional monitoring and analytics

| Provider | Service purpose | Relevant information | | ---------------- | --------------------------------------------- | ---------------------------------------------------------------------------------- | | Sentry | Configured error and performance monitoring | Error details, diagnostic context, and applicable request or device information | | Google Analytics | Analytics when a measurement ID is configured | Page and interaction events and applicable browser, device, or request information |

The Cookie Policy describes browser storage and the limits of the current preference banner. Payment providers and other services can also act under their own legal obligations and policies for some activities.

4. External sources and customer choices

Agents may query scientific sources such as OpenAlex, Europe PMC, arXiv, Semantic Scholar, bio.tools, PyPI, Zenodo, UniProt, NCBI, RCSB PDB, and configured Materials Project integrations. These are external information sources; listing them is not a representation that each has a processor agreement with Lasques. Research-derived queries and authorized downloads are governed by the relevant service and source terms.

Services you independently connect or use are also subject to their own terms. Do not send them data you are not authorized to disclose.

5. Locations, changes, and inquiries

This list does not assert a fixed processing country, a data-residency guarantee, a certification, or a transfer mechanism for a provider. Contact [email protected] for the deployment and processing details relevant to your use, or for subprocessor notices and objections under the DPA.

We will update the list as relevant providers and purposes change. The Privacy Policy, DPA, Terms, and any applicable signed agreement govern their respective subject matter.